Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e39332e3134342e302f32332d3233203d3e203532383631.roa
File:                     3137372e39332e3134342e302f32332d3233203d3e203532383631.roa (raw, json)
Hash identifier:          eO0h1OIXuCscOUog7P/C4ft7AMNyqy8ufrjm2hGdt/0=
Subject key identifier:   BA:92:F7:D7:CF:7D:F7:84:7D:06:2B:E7:CF:43:42:D7:CE:3E:46:58
Certificate issuer:       /CN=836BA4893066A2B7B112A0DB316F1611FD005A58
Certificate serial:       490143858C7AE9F40D9695A72E8C76383F8F0AF1
Authority key identifier: 83:6B:A4:89:30:66:A2:B7:B1:12:A0:DB:31:6F:16:11:FD:00:5A:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/836BA4893066A2B7B112A0DB316F1611FD005A58.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e39332e3134342e302f32332d3233203d3e203532383631.roa
Signing time:             Fri 01 Mar 2024 14:20:32 +0000
ROA not before:           Fri 01 Mar 2024 14:15:32 +0000
ROA not after:            Fri 28 Feb 2025 14:20:32 +0000
asID:                     52861
IP address blocks:        177.93.144.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:01:43:85:8c:7a:e9:f4:0d:96:95:a7:2e:8c:76:38:3f:8f:0a:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=836BA4893066A2B7B112A0DB316F1611FD005A58
        Validity
            Not Before: Mar  1 14:15:32 2024 GMT
            Not After : Feb 28 14:20:32 2025 GMT
        Subject: CN=BA92F7D7CF7DF7847D062BE7CF4342D7CE3E4658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ab:0b:06:00:16:3c:78:78:18:a2:5f:dc:6a:
                    67:2c:7b:3a:87:11:74:d4:28:aa:6a:ea:9d:ea:e5:
                    66:bf:b2:98:50:27:7c:e0:5d:e2:33:c5:7d:60:9b:
                    5a:6a:51:1a:45:84:06:fc:b7:c4:1d:41:f6:be:2e:
                    bd:73:4f:5f:cf:f4:f5:43:64:4d:65:43:dc:6f:72:
                    e3:df:95:c8:d5:98:d2:ff:5d:81:ca:7d:c4:1a:e6:
                    ec:ca:58:9a:53:7c:e9:11:c0:73:b5:62:0d:1a:bc:
                    77:ef:dd:09:4a:c5:56:bd:92:5f:82:77:01:b3:e7:
                    77:d6:ce:de:5d:1e:f4:bf:97:52:ea:61:41:4d:40:
                    dd:0d:64:fd:e7:64:68:be:9a:84:d1:00:3a:85:7d:
                    24:1f:1d:99:7f:fd:71:f9:be:9e:51:bb:72:f6:ac:
                    9d:14:c7:0d:a3:3d:f8:23:b4:2c:39:0a:8d:08:aa:
                    ce:a4:55:a2:08:08:0b:2e:1d:e6:f9:1a:d8:55:81:
                    20:39:f7:4d:cb:d1:1e:b0:19:34:b1:82:36:19:79:
                    9e:13:82:bc:74:c6:e4:91:8c:dd:86:7f:07:ff:6c:
                    e6:0c:1c:9d:a9:e9:da:f8:bc:e4:14:4a:62:86:c8:
                    dc:ea:10:de:7d:bd:88:29:f6:2d:87:f7:19:54:39:
                    d1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:92:F7:D7:CF:7D:F7:84:7D:06:2B:E7:CF:43:42:D7:CE:3E:46:58
            X509v3 Authority Key Identifier:
                keyid:83:6B:A4:89:30:66:A2:B7:B1:12:A0:DB:31:6F:16:11:FD:00:5A:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/836BA4893066A2B7B112A0DB316F1611FD005A58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/836BA4893066A2B7B112A0DB316F1611FD005A58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e39332e3134342e302f32332d3233203d3e203532383631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.93.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:94:3a:6d:7f:06:cc:a3:b9:67:ac:fc:31:95:46:7c:cb:cc:
         95:f4:23:bd:04:ea:e4:91:1c:d7:f3:78:20:b1:cc:f5:9e:b4:
         b1:9c:d1:6f:43:5d:76:07:29:0b:20:aa:3e:dd:5f:d6:f4:f0:
         0e:b1:11:7f:52:dc:49:8e:6d:dc:d1:1b:3f:e8:95:b5:ef:a9:
         1a:d1:a0:aa:18:81:3e:cd:84:f5:7c:e0:7b:3e:97:d9:6e:3c:
         60:66:8a:87:08:a5:ea:9d:b3:2a:16:ad:c8:8e:ac:99:0d:7f:
         38:a9:4e:6e:5a:5f:59:d3:ec:a1:fe:87:01:49:c1:1e:f0:25:
         97:5d:3d:76:6f:b7:68:02:d9:fe:be:cd:ae:8b:44:ba:b6:df:
         03:0a:f7:05:78:d1:71:f9:47:02:89:46:ff:88:d1:88:f5:2d:
         05:90:f7:cd:12:b5:89:e1:3f:92:45:8e:b0:1d:1a:aa:cb:92:
         ac:92:bc:e1:ef:f2:a3:4d:bf:ce:56:70:46:a8:e9:58:7d:51:
         b7:15:d6:4c:ba:fe:a4:82:f1:3d:3b:c4:cc:2e:d6:f7:91:11:
         5f:c2:cb:e3:b5:11:7d:6a:f9:d7:9b:fa:0b:cc:de:47:d3:08:
         d2:8a:28:59:ab:8a:a9:1b:91:cb:78:61:7b:8d:9f:c0:7b:da:
         28:18:0d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:55 2024 by rpki-client on console-fra.rpki-client.org